Submit #575244: D-Link DI-500WF-WT latest Command Injectioninfo

TitleD-Link DI-500WF-WT latest Command Injection
DescriptionThe DI-500WF-WT 802.11N300M touch panel AP under Youxun Technology Co., Ltd. has a command injection vulnerability, allowing attackers to execute arbitrary code through the cmd parameter in the sub-456DE8 function
User
 eternity. (UID 85154)
Submission05/11/2025 07:55 (12 months ago)
Moderation06/03/2025 06:24 (23 days later)
StatusAccepted
VulDB entry310909 [D-Link DI-500WF-WT up to 20250511 jhttpd /msp_info.htm?flag=cmd sub_456DE8 command injection]
Points13

Do you want to use VulDB in your project?

Use the official API to access entries easily!